Static task
static1
Behavioral task
behavioral1
Sample
49e87472ecf1fb0f16f381071211c777727e896ed92e8772c3ef02504d0902a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49e87472ecf1fb0f16f381071211c777727e896ed92e8772c3ef02504d0902a7.exe
Resource
win10v2004-20220812-en
General
-
Target
49e87472ecf1fb0f16f381071211c777727e896ed92e8772c3ef02504d0902a7
-
Size
1022KB
-
MD5
1cc5bcaf66bdb27eaab14c10ed0f29f0
-
SHA1
7e7a7ecaabf5aca1ba8472a77bae99f854f853bc
-
SHA256
49e87472ecf1fb0f16f381071211c777727e896ed92e8772c3ef02504d0902a7
-
SHA512
3b8c2494e93386574dfaa27fd48e2f6acc7d8e7bbb483e11e5b9e3c81011f0050a5c351b502f92c16c74557b6c102bfefdf2bbf6873b46b19bfa45c971bbdd52
-
SSDEEP
12288:Q5DSRZqbxNtbh5CTNzblEOGSEzUvzblE4wEQRUSEcfv44IdmIKwT5l:yDBbxzb7WN+OP+ac349Fl
Malware Config
Signatures
Files
-
49e87472ecf1fb0f16f381071211c777727e896ed92e8772c3ef02504d0902a7.exe windows x86
bcaffb3910b8faa8d640e5fd61d71400
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupGetLineTextW
SetupFindNextLine
SetupCloseInfFile
SetupFindFirstLineW
SetupOpenInfFileW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetINFClassW
SetupDiGetDeviceRegistryPropertyW
SetupCopyOEMInfW
SetupGetStringFieldW
shlwapi
PathRelativePathToW
PathAppendW
PathRemoveArgsW
PathStripPathW
PathFindFileNameW
kernel32
SizeofResource
FindResourceW
SetEvent
CreateEventW
CreateThread
VerifyVersionInfoW
VerSetConditionMask
FindNextFileW
FindClose
FindFirstFileW
GetLocalTime
GetCurrentProcess
GetProcAddress
GetModuleHandleW
GetSystemInfo
GetVersionExW
TerminateProcess
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
FreeLibrary
LoadLibraryW
GetSystemDirectoryW
GetFileAttributesW
WriteFile
CreateFileA
GetModuleFileNameA
GetModuleFileNameW
GetWindowsDirectoryW
MoveFileExW
DeleteFileW
SetFileAttributesW
Sleep
LoadResource
GetCommandLineW
CreateProcessW
GetLocaleInfoW
SetFilePointer
GetExitCodeProcess
ConvertDefaultLocale
GetSystemDefaultLangID
EnumResourceLanguagesW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
IsValidCodePage
GetOEMCP
GetACP
HeapSize
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStringTypeW
GetStringTypeA
GetCPInfo
LCMapStringW
LCMapStringA
LockResource
MultiByteToWideChar
CreateFileW
GetFileSize
ReadFile
WaitForSingleObject
CloseHandle
SetLastError
CopyFileW
GetLastError
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
ExitProcess
GetStartupInfoW
GetProcessHeap
GetVersionExA
GetModuleHandleA
HeapAlloc
HeapFree
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
RaiseException
LocalAlloc
InterlockedExchange
LoadLibraryA
user32
MapDialogRect
LoadImageW
DialogBoxParamW
LoadIconW
SendDlgItemMessageW
EnableWindow
SetDlgItemTextW
SetWindowTextW
SetFocus
SetWindowPos
GetDlgItem
SendMessageW
ShowWindow
SetTimer
PostMessageW
ReleaseDC
GetDC
ExitWindowsEx
GetWindowThreadProcessId
GetWindowModuleFileNameW
EnumWindows
MessageBoxW
LoadStringW
wsprintfW
EndDialog
KillTimer
gdi32
GetTextExtentPoint32W
SetTextColor
SetBkMode
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
CreateFontW
SelectObject
advapi32
IsTextUnicode
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumValueW
RegQueryValueExW
CreateServiceW
ChangeServiceConfigW
ChangeServiceConfig2W
StartServiceW
QueryServiceStatus
QueryServiceConfigW
ControlService
DeleteService
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
shell32
SHCreateDirectoryExW
ShellExecuteW
SHGetFolderPathW
ole32
OleInitialize
OleUninitialize
CoInitialize
CoCreateInstance
psapi
EnumProcessModules
GetModuleFileNameExW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 560KB - Virtual size: 558KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
jwqlnn Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 80KB - Virtual size: 77KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE